Generate kbn/ecs with ECS 8.6.1 (#151642)

## Summary

This PR updates kbn/ecs to defintions generated with ECS 8.6.1

---------

Co-authored-by: kibanamachine <42973632+kibanamachine@users.noreply.github.com>

packages/core/logging/core-logging-server-internal/src/__snapshots__/logging_system.test.ts.snap

@@ -16,7 +16,7 @@ exports[`asLoggerFactory() only allows to create new loggers. 1`] = `
 Object {
   "@timestamp": "2012-01-30T22:33:22.011-05:00",
   "ecs": Object {
-    "version": "8.6.0",
+    "version": "8.6.1",
   },
   "log": Object {
     "level": "TRACE",
@@ -33,7 +33,7 @@ exports[`asLoggerFactory() only allows to create new loggers. 2`] = `
 Object {
   "@timestamp": "2012-01-30T17:33:22.011-05:00",
   "ecs": Object {
-    "version": "8.6.0",
+    "version": "8.6.1",
   },
   "log": Object {
     "level": "INFO",
@@ -51,7 +51,7 @@ exports[`asLoggerFactory() only allows to create new loggers. 3`] = `
 Object {
   "@timestamp": "2012-01-30T12:33:22.011-05:00",
   "ecs": Object {
-    "version": "8.6.0",
+    "version": "8.6.1",
   },
   "log": Object {
     "level": "FATAL",
@@ -68,7 +68,7 @@ exports[`flushes memory buffer logger and switches to real logger once config is
 Object {
   "@timestamp": "2012-02-01T09:33:22.011-05:00",
   "ecs": Object {
-    "version": "8.6.0",
+    "version": "8.6.1",
   },
   "log": Object {
     "level": "INFO",
@@ -86,7 +86,7 @@ exports[`flushes memory buffer logger and switches to real logger once config is
 Object {
   "@timestamp": "2012-01-31T23:33:22.011-05:00",
   "ecs": Object {
-    "version": "8.6.0",
+    "version": "8.6.1",
   },
   "log": Object {
     "level": "INFO",

packages/kbn-ecs/generated/ecs.ts

@@ -14,5 +14,5 @@ export interface EcsEcs {
    * ECS version this event conforms to. `ecs.version` is a required field and must exist in all events.
    * When querying across multiple indices -- which may conform to slightly different ECS versions -- this field lets integrations adjust to the schema version of the events.
    */
-  version: '8.6.0';
+  version: '8.6.1';
 }

packages/kbn-ecs/generated/ecs_flat.ts

@@ -13765,14 +13765,27 @@ export const EcsFlat = {
     short: 'Date/time indicator was last reported.',
     type: 'date',
   },
-  'threat.enrichments.indicator.marking.tlp.version': {
+  'threat.enrichments.indicator.marking.tlp': {
+    dashed_name: 'threat-enrichments-indicator-marking-tlp',
+    description: 'Traffic Light Protocol sharing markings.',
+    example: 'CLEAR',
+    expected_values: ['WHITE', 'CLEAR', 'GREEN', 'AMBER', 'AMBER+STRICT', 'RED'],
+    flat_name: 'threat.enrichments.indicator.marking.tlp',
+    ignore_above: 1024,
+    level: 'extended',
+    name: 'enrichments.indicator.marking.tlp',
+    normalize: [],
+    short: 'Indicator TLP marking',
+    type: 'keyword',
+  },
+  'threat.enrichments.indicator.marking.tlp_version': {
     dashed_name: 'threat-enrichments-indicator-marking-tlp-version',
     description: 'Traffic Light Protocol version.',
     example: 2,
-    flat_name: 'threat.enrichments.indicator.marking.tlp.version',
+    flat_name: 'threat.enrichments.indicator.marking.tlp_version',
     ignore_above: 1024,
     level: 'extended',
-    name: 'enrichments.indicator.marking.tlp.version',
+    name: 'enrichments.indicator.marking.tlp_version',
     normalize: [],
     short: 'Indicator TLP version',
     type: 'keyword',
@@ -16202,6 +16215,18 @@ export const EcsFlat = {
     short: 'Indicator TLP marking',
     type: 'keyword',
   },
+  'threat.indicator.marking.tlp_version': {
+    dashed_name: 'threat-indicator-marking-tlp-version',
+    description: 'Traffic Light Protocol version.',
+    example: 2,
+    flat_name: 'threat.indicator.marking.tlp_version',
+    ignore_above: 1024,
+    level: 'extended',
+    name: 'indicator.marking.tlp_version',
+    normalize: [],
+    short: 'Indicator TLP version',
+    type: 'keyword',
+  },
   'threat.indicator.modified_at': {
     dashed_name: 'threat-indicator-modified-at',
     description:
@@ -17129,18 +17154,6 @@ export const EcsFlat = {
     short: 'Threat subtechnique URL reference.',
     type: 'keyword',
   },
-  'threat.threat.indicator.marking.tlp.version': {
-    dashed_name: 'threat-threat-indicator-marking-tlp-version',
-    description: 'Traffic Light Protocol version.',
-    example: 2,
-    flat_name: 'threat.threat.indicator.marking.tlp.version',
-    ignore_above: 1024,
-    level: 'extended',
-    name: 'threat.indicator.marking.tlp.version',
-    normalize: [],
-    short: 'Indicator TLP version',
-    type: 'keyword',
-  },
   'tls.cipher': {
     dashed_name: 'tls-cipher',
     description: 'String indicating the cipher used during the current connection.',

packages/kbn-ecs/generated/ecs_nested.ts

@@ -15969,14 +15969,27 @@ export const EcsNested = {
         short: 'Date/time indicator was last reported.',
         type: 'date',
       },
-      'threat.enrichments.indicator.marking.tlp.version': {
+      'threat.enrichments.indicator.marking.tlp': {
+        dashed_name: 'threat-enrichments-indicator-marking-tlp',
+        description: 'Traffic Light Protocol sharing markings.',
+        example: 'CLEAR',
+        expected_values: ['WHITE', 'CLEAR', 'GREEN', 'AMBER', 'AMBER+STRICT', 'RED'],
+        flat_name: 'threat.enrichments.indicator.marking.tlp',
+        ignore_above: 1024,
+        level: 'extended',
+        name: 'enrichments.indicator.marking.tlp',
+        normalize: [],
+        short: 'Indicator TLP marking',
+        type: 'keyword',
+      },
+      'threat.enrichments.indicator.marking.tlp_version': {
         dashed_name: 'threat-enrichments-indicator-marking-tlp-version',
         description: 'Traffic Light Protocol version.',
         example: 2,
-        flat_name: 'threat.enrichments.indicator.marking.tlp.version',
+        flat_name: 'threat.enrichments.indicator.marking.tlp_version',
         ignore_above: 1024,
         level: 'extended',
-        name: 'enrichments.indicator.marking.tlp.version',
+        name: 'enrichments.indicator.marking.tlp_version',
         normalize: [],
         short: 'Indicator TLP version',
         type: 'keyword',
@@ -18414,6 +18427,18 @@ export const EcsNested = {
         short: 'Indicator TLP marking',
         type: 'keyword',
       },
+      'threat.indicator.marking.tlp_version': {
+        dashed_name: 'threat-indicator-marking-tlp-version',
+        description: 'Traffic Light Protocol version.',
+        example: 2,
+        flat_name: 'threat.indicator.marking.tlp_version',
+        ignore_above: 1024,
+        level: 'extended',
+        name: 'indicator.marking.tlp_version',
+        normalize: [],
+        short: 'Indicator TLP version',
+        type: 'keyword',
+      },
       'threat.indicator.modified_at': {
         dashed_name: 'threat-indicator-modified-at',
         description:
@@ -19344,18 +19369,6 @@ export const EcsNested = {
         short: 'Threat subtechnique URL reference.',
         type: 'keyword',
       },
-      'threat.threat.indicator.marking.tlp.version': {
-        dashed_name: 'threat-threat-indicator-marking-tlp-version',
-        description: 'Traffic Light Protocol version.',
-        example: 2,
-        flat_name: 'threat.threat.indicator.marking.tlp.version',
-        ignore_above: 1024,
-        level: 'extended',
-        name: 'threat.indicator.marking.tlp.version',
-        normalize: [],
-        short: 'Indicator TLP version',
-        type: 'keyword',
-      },
     },
     group: 2,
     name: 'threat',

packages/kbn-ecs/generated/index.ts

@@ -57,7 +57,7 @@ import { EcsVlan } from './vlan';
 import { EcsVulnerability } from './vulnerability';
 import { EcsX509 } from './x509';
 
-export const EcsVersion = '8.6.0' as const;
+export const EcsVersion = '8.6.1' as const;
 
 /**
  * Exporting raw schema files for easy programmatic use

packages/kbn-ecs/generated/threat.ts

@@ -554,6 +554,10 @@ export interface EcsThreat {
        * Traffic Light Protocol sharing markings.
        */
       tlp?: string;
+      /**
+       * Traffic Light Protocol version.
+       */
+      tlp_version?: string;
     };
 
     /**
@@ -875,17 +879,4 @@ export interface EcsThreat {
       reference?: string[];
     };
   };
-
-  threat?: {
-    indicator?: {
-      marking?: {
-        tlp?: {
-          /**
-           * Traffic Light Protocol version.
-           */
-          version?: string;
-        };
-      };
-    };
-  };
 }